This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
File:                     ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json)
Hash identifier:          DXyukIRbVIAH+ckEgj8W56d9WexIwbPA9Fq62HC0T40=
Subject key identifier:   F6:7F:CF:85:B9:69:D1:FD:45:06:42:11:1B:06:44:B4:4A:DD:6F:88
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Certificate issuer:       /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial:       019C41A25018C655F28C6515CB0CB314B0A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
Manifest number:          1510
Signing time:             Mon 09 Feb 2026 09:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:22 +0000
Files and hashes:         1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: 4Kp2T8PlEOYxUp89wcVtnYKf87ieIMENhUxAuj2xbvc=)
                          2: PzjeGXZDmGrcBL-5SLz6YkxQyDo.roa (hash: 2NL/gh4kC5fIE0HniOqEKL8Ijhb8+hqlpLKTL/K3tGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:50:18:c6:55:f2:8c:65:15:cb:0c:b3:14:b0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
        Validity
            Not Before: Feb  9 09:01:22 2026 GMT
            Not After : Feb 10 09:01:22 2026 GMT
        Subject: CN=f67fcf85b969d1fd450642111b0644b44add6f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:1e:94:fc:03:57:7b:fa:b4:15:b1:25:a9:
                    de:ee:7c:8e:65:8e:e1:52:65:c8:92:e7:a5:76:e7:
                    89:3d:42:3a:5a:85:3c:e7:bc:a2:4b:f2:9d:92:c9:
                    41:a2:9d:5b:6e:6f:21:f0:00:82:b9:4f:fd:4a:9a:
                    2a:f6:17:c6:2a:67:e2:4f:d4:a6:8a:66:50:6c:c4:
                    78:dc:69:01:3d:90:3b:b0:21:c0:ad:00:1d:19:bc:
                    ab:22:fa:51:b2:9d:0e:7d:3a:46:e8:44:72:62:66:
                    fe:31:b7:36:71:3c:fe:2b:92:22:50:3a:d7:6d:8f:
                    1c:45:eb:d6:3e:cb:27:e3:b8:03:99:2f:79:a4:3b:
                    c0:44:93:a2:b2:ee:4d:e7:a4:ec:8f:21:d6:aa:52:
                    f3:fd:af:78:80:51:85:cd:ba:72:f6:ff:a8:14:2a:
                    77:04:7a:ca:68:14:86:c7:18:9c:8b:13:29:2e:4e:
                    94:0f:30:2d:ea:fc:a3:93:9b:92:1a:9f:14:fb:76:
                    1d:e4:6f:46:a9:2b:5d:af:02:30:40:7d:b6:0d:70:
                    b3:41:36:d7:6a:25:81:d5:b0:8b:54:fb:b9:c4:04:
                    64:d6:42:4a:50:33:59:e7:b7:fe:1d:5b:f9:bb:71:
                    b0:7b:e6:91:0b:e7:93:dd:c3:2a:5c:b9:66:79:6e:
                    47:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7F:CF:85:B9:69:D1:FD:45:06:42:11:1B:06:44:B4:4A:DD:6F:88
            X509v3 Authority Key Identifier:
                keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5d:f4:0d:fb:b7:57:71:fb:ea:40:b0:b1:4c:0b:42:f1:23:
         e3:9c:27:ca:c7:ff:87:d3:18:16:06:31:b3:44:08:07:3d:7c:
         13:ad:f9:66:24:dc:53:be:db:d6:a5:61:1b:80:b5:cb:25:2a:
         e4:e1:12:8a:16:a6:c6:2c:31:ba:6c:5b:20:fd:7d:90:87:81:
         9f:d2:26:07:bf:57:a5:3f:cc:a0:ce:9c:7e:6d:62:df:df:ac:
         cf:74:b6:c4:1b:05:27:86:9d:d5:55:69:62:b5:d1:7f:50:36:
         3a:0e:c3:20:ba:10:c2:4a:7c:92:e2:17:cf:05:21:cf:4a:df:
         7c:eb:59:e2:37:2c:4d:31:5d:4d:da:a8:7a:25:79:bf:0d:c8:
         30:f0:bb:9f:82:dc:d1:8d:85:29:5c:48:65:ce:19:f9:36:a5:
         b0:cc:ee:f2:a7:56:88:d0:a6:e4:2e:1e:9a:55:ed:81:73:08:
         56:4c:14:28:d4:6c:45:15:41:0f:3f:e1:49:7f:43:1c:78:33:
         d9:42:4a:1b:8c:49:26:c4:41:d2:f3:89:8f:39:4f:6b:03:76:
         93:30:c7:92:f5:55:d0:9a:b2:2f:6c:8d:f4:90:b4:c1:5e:ac:
         59:26:d6:97:a8:f8:d2:41:e5:2d:32:b9:45:9c:d5:e3:1c:b8:
         18:98:fc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:37 2026 by rpki-client